Improper Check for Unusual or Exceptional Conditions in Linux kernel - CVE-2026-80652
Published: August 28, 2026
Vulnerability identifier: #VU146147
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-80652
CWE-ID: CWE-754
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper handling of a zero-length buffer in sev_ioctl_do_pdh_export() when processing a PDH export request. A local user can send a crafted ioctl request with a zero-length certificate chain buffer to cause a denial of service.
The issue results in a kernel BUG when CONFIG_DEBUG_VIRTUAL=y.
Affected software
Linux kernel
How to mitigate CVE-2026-80652
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/13b4d5e055d344e34b864bced0a591ceaac7ad81
- https://git.kernel.org/stable/c/1c587f30c6242cc37b3d6ee6d91daef84e51633f
- https://git.kernel.org/stable/c/21650fe221ea9b72809140b691589dde8bff3eab
- https://git.kernel.org/stable/c/50c3c7df4f26d36b30bc950a7d780f7029fd52f8
- https://git.kernel.org/stable/c/94344bc7c9d70b04be718d841b92873aa3ea8191
- https://git.kernel.org/stable/c/d88071a6ce091272726bedda26c105b85b23705f
- https://git.kernel.org/stable/c/ee717e73ab47253c82c134c342e32fcdfcfccd87
- https://git.kernel.org/stable/c/ef8c9dacda2871accd64e3eda951fef6b788b1ea